@zhuixin/cli 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/index.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/index.js

@@ -0,0 +1,619 @@
+#!/usr/bin/env node
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// src/index.ts
+var import_node_child_process = require("child_process");
+var import_node_fs = __toESM(require("fs"));
+var import_node_path = __toESM(require("path"));
+var import_metadata = require("@zhuixin/metadata");
+var import_shared = require("@zhuixin/shared");
+var GOALS = [
+  "tech_stack",
+  "feature_map",
+  "network",
+  "native_risk",
+  "report"
+];
+function usage() {
+  console.log(`AppTrace 0.1.0
+
+Usage:
+  apptrace setup [--json] [--install] [--write-config <path>]
+  apptrace doctor [--json]
+  apptrace auth login
+  apptrace auth status
+  apptrace targets add <app-store-url-or-id>
+  apptrace targets list
+  apptrace analyze [app-store-url-or-id] [--target <target-id>] [--goals ...] [--force]
+  apptrace report <target-id>
+  apptrace jobs get <job-id>
+  apptrace search <target-id> [query] [--type route,module] [--limit 50]
+  apptrace native search <target-id> <query> [--kind procedures|strings]
+  apptrace native decompile <target-id> <function-name>
+  apptrace evidence <target-id>
+  apptrace compare <target-id> <left-artifact-id> <right-artifact-id> [--force]
+  apptrace capabilities [target-id]
+  apptrace engine install <engine-file> [--sha256 <digest>]
+  apptrace mcp
+
+Examples:
+  apptrace analyze https://apps.apple.com/cn/app/id1616124777
+  apptrace analyze 1616124777 --goals tech_stack,feature_map,native_risk,report
+`);
+}
+function option(args, name) {
+  const index = args.indexOf(name);
+  if (index >= 0 && args[index + 1]) return args[index + 1];
+  const prefix = `${name}=`;
+  const inline = args.find((arg) => arg.startsWith(prefix));
+  return inline ? inline.slice(prefix.length) : void 0;
+}
+function hasFlag(args, name) {
+  return args.includes(name);
+}
+function positional(args) {
+  return args.find((arg) => !arg.startsWith("--"));
+}
+function parseGoals(value) {
+  if (!value) return ["tech_stack", "feature_map", "report"];
+  const goals = value.split(",").map((item) => item.trim()).filter(Boolean);
+  const invalid = goals.filter(
+    (goal) => !GOALS.includes(goal)
+  );
+  if (invalid.length > 0) {
+    throw new import_metadata.CoreFailure(
+      "INVALID_INPUT",
+      `\u672A\u77E5\u5206\u6790\u76EE\u6807\uFF1A${invalid.join(", ")}\u3002\u53EF\u9009\uFF1A${GOALS.join(", ")}`
+    );
+  }
+  return goals;
+}
+function printJson(value) {
+  process.stdout.write(`${JSON.stringify(value, null, 2)}
+`);
+}
+function printError(error) {
+  if (error instanceof import_metadata.CoreFailure) {
+    console.error(`${error.code}: ${error.message}`);
+    if (error.code === "AUTH_REQUIRED" || error.code === "KEYCHAIN_LOCKED") {
+      console.error("Next: apptrace auth login");
+    } else if (error.code === "LICENSE_REQUIRED") {
+      console.error("Next: \u5728 iPhone App Store \u83B7\u53D6\u6216\u8D2D\u4E70\u8BE5\u5E94\u7528\u540E\u91CD\u8BD5\u3002");
+    }
+    return;
+  }
+  console.error(error instanceof Error ? error.stack ?? error.message : String(error));
+}
+function withCore(operation) {
+  const core = new import_metadata.CoreServer({ config: (0, import_metadata.loadConfig)(), emit: () => {
+  } });
+  return operation(core).finally(() => core.close());
+}
+function interactive(command, args, env) {
+  return new Promise((resolve, reject) => {
+    const isWindowsCommand = process.platform === "win32" && [".cmd", ".bat"].includes(import_node_path.default.extname(command).toLowerCase());
+    const child = isWindowsCommand ? (0, import_node_child_process.spawn)(
+      process.env.ComSpec || "cmd.exe",
+      ["/d", "/s", "/c", `"${command}" ${args.join(" ")}`],
+      {
+        stdio: "inherit",
+        windowsVerbatimArguments: true,
+        env: env ? { ...process.env, ...env } : process.env
+      }
+    ) : (0, import_node_child_process.spawn)(command, args, {
+      stdio: "inherit",
+      env: env ? { ...process.env, ...env } : process.env
+    });
+    child.on("error", reject);
+    child.on("exit", (code) => resolve(code));
+  });
+}
+async function doctor(json) {
+  const config = (0, import_metadata.loadConfig)();
+  await withCore(async (core) => {
+    const health = await core.handle(import_shared.CHANNELS.health, {});
+    const capabilities2 = await core.handle(
+      import_shared.CHANNELS.capabilitiesList,
+      {}
+    );
+    const result = { config, health, capabilities: capabilities2 };
+    if (json) {
+      printJson(result);
+      return;
+    }
+    console.log(`workspace: ${health.workspaceRoot}`);
+    console.log(`host:      ${health.hostPlatform}`);
+    console.log(`store:     ${health.store}`);
+    console.log("tools:");
+    for (const tool of health.tools ?? []) {
+      console.log(
+        `  ${tool.available ? "OK  " : "MISS"} ${tool.label}: ${tool.path}`
+      );
+    }
+    console.log("capabilities:");
+    for (const capability of capabilities2) {
+      console.log(
+        `  ${capability.available ? "OK  " : "NO  "} ${capability.id}${capability.reason ? ` \u2014 ${capability.reason}` : ""}`
+      );
+    }
+  });
+}
+function createEngineLauncher(workspaceRoot) {
+  const reaScript = require.resolve("rea-agents/scripts/rea.mjs");
+  const tools = import_node_path.default.join(workspaceRoot, "tools");
+  const javaHome = import_node_path.default.join(tools, "jdk");
+  const ghidraHome = import_node_path.default.join(tools, "ghidra_12.1.4_PUBLIC");
+  const ghidraUserHome = import_node_path.default.join(workspaceRoot, ".ghidra-home");
+  import_node_fs.default.mkdirSync(import_node_path.default.join(tools, "bin"), { recursive: true, mode: 448 });
+  import_node_fs.default.mkdirSync(ghidraUserHome, { recursive: true, mode: 448 });
+  const launcher = import_node_path.default.join(
+    tools,
+    "bin",
+    process.platform === "win32" ? "rea.cmd" : "rea"
+  );
+  if (process.platform === "win32") {
+    import_node_fs.default.writeFileSync(
+      launcher,
+      [
+        "@echo off",
+        `set "JAVA_HOME=${javaHome}"`,
+        `set "GHIDRA_INSTALL_DIR=${ghidraHome}"`,
+        `set "GHIDRA_USER_HOME=${ghidraUserHome}"`,
+        'set "PATH=%JAVA_HOME%\\bin;%PATH%"',
+        `"${process.execPath}" "${reaScript}" %*`,
+        ""
+      ].join("\r\n"),
+      { mode: 448 }
+    );
+  } else {
+    import_node_fs.default.writeFileSync(
+      launcher,
+      [
+        "#!/usr/bin/env bash",
+        "set -euo pipefail",
+        `export JAVA_HOME=${JSON.stringify(javaHome)}`,
+        `export GHIDRA_INSTALL_DIR=${JSON.stringify(ghidraHome)}`,
+        `export GHIDRA_USER_HOME=${JSON.stringify(ghidraUserHome)}`,
+        'export PATH="$JAVA_HOME/bin:$PATH"',
+        'export JAVA_TOOL_OPTIONS="${JAVA_TOOL_OPTIONS:-} -Duser.home=$GHIDRA_USER_HOME"',
+        `exec ${JSON.stringify(process.execPath)} ${JSON.stringify(reaScript)} "$@"`,
+        ""
+      ].join("\n"),
+      { mode: 448 }
+    );
+  }
+  return launcher;
+}
+async function installTools(config, json = false) {
+  if (import_node_fs.default.existsSync(config.enginePath) && import_node_fs.default.existsSync(config.ipatoolPath)) {
+    process.stderr.write("Tools already available; download skipped.\n");
+    return;
+  }
+  if (process.platform === "win32" && process.arch === "x64") {
+    const script2 = import_node_path.default.resolve(__dirname, "../../scripts/bootstrap-tools.ps1");
+    if (!import_node_fs.default.existsSync(script2)) {
+      throw new import_metadata.CoreFailure("TOOL_INSTALLER_MISSING", `\u627E\u4E0D\u5230\u5B89\u88C5\u811A\u672C\uFF1A${script2}`);
+    }
+    process.stderr.write(
+      "Installing JDK, Ghidra and ipatool for Windows x64. This can take several minutes.\n"
+    );
+    const code2 = await interactive("powershell.exe", [
+      "-NoProfile",
+      "-ExecutionPolicy",
+      "Bypass",
+      "-File",
+      script2,
+      "-WorkspaceRoot",
+      config.workspaceRoot
+    ], {
+      APPTRACE_WORKSPACE_ROOT: config.workspaceRoot,
+      APPTRACE_TOOLS_DIR: import_node_path.default.join(config.workspaceRoot, "tools"),
+      ...process.env.APPTRACE_IPATOOL_SHA256 ? { APPTRACE_IPATOOL_SHA256: process.env.APPTRACE_IPATOOL_SHA256 } : {}
+    });
+    if (code2 !== 0) {
+      throw new import_metadata.CoreFailure(
+        "TOOL_INSTALL_FAILED",
+        `\u5DE5\u5177\u5B89\u88C5\u5931\u8D25\uFF0C\u9000\u51FA\u7801\uFF1A${code2 ?? "unknown"}`
+      );
+    }
+    const launcher2 = createEngineLauncher(config.workspaceRoot);
+    process.stderr.write(`Analysis engine launcher: ${launcher2}
+`);
+    return;
+  }
+  if (process.platform !== "darwin" || process.arch !== "arm64") {
+    throw new import_metadata.CoreFailure(
+      "TOOL_INSTALL_UNSUPPORTED",
+      "v1 \u81EA\u52A8\u5B89\u88C5\u5668\u5F53\u524D\u53EA\u652F\u6301 macOS arm64\uFF1B\u5176\u4ED6\u5E73\u53F0\u8BF7\u4F7F\u7528 APPTRACE_ENGINE_PATH \u548C APPTRACE_IPATOOL_PATH\u3002"
+    );
+  }
+  const script = import_node_path.default.resolve(__dirname, "../../scripts/bootstrap-tools.sh");
+  if (!import_node_fs.default.existsSync(script)) {
+    throw new import_metadata.CoreFailure("TOOL_INSTALLER_MISSING", `\u627E\u4E0D\u5230\u5B89\u88C5\u811A\u672C\uFF1A${script}`);
+  }
+  process.stderr.write(
+    "Installing JDK, Ghidra and ipatool. This can take several minutes.\n"
+  );
+  const code = await interactive("/bin/bash", [script], {
+    APPTRACE_WORKSPACE_ROOT: config.workspaceRoot,
+    APPTRACE_TOOLS_DIR: import_node_path.default.join(config.workspaceRoot, "tools")
+  });
+  if (code !== 0) {
+    throw new import_metadata.CoreFailure(
+      "TOOL_INSTALL_FAILED",
+      `\u5DE5\u5177\u5B89\u88C5\u5931\u8D25\uFF0C\u9000\u51FA\u7801\uFF1A${code ?? "unknown"}`
+    );
+  }
+  const launcher = createEngineLauncher(config.workspaceRoot);
+  process.stderr.write(`Analysis engine launcher: ${launcher}
+`);
+}
+async function setup(json, args) {
+  const configPath = option(args, "--write-config");
+  const config = (0, import_metadata.loadConfig)();
+  if (hasFlag(args, "--install")) {
+    await installTools(config, json);
+  }
+  await doctor(json);
+  if (json && !configPath) return;
+  const serverEntry = import_node_path.default.resolve(__dirname, "../../mcp/dist/index.js");
+  const env = {
+    APPTRACE_WORKSPACE_ROOT: config.workspaceRoot,
+    APPTRACE_ENGINE_PATH: config.enginePath,
+    APPTRACE_ANALYSIS_ENGINE_PATH: config.analysisEnginePath,
+    APPTRACE_IPATOOL_PATH: config.ipatoolPath
+  };
+  if (configPath) {
+    const absolute = import_node_path.default.resolve(configPath);
+    const extension = import_node_path.default.extname(absolute).toLowerCase();
+    if (extension === ".json") {
+      import_node_fs.default.mkdirSync(import_node_path.default.dirname(absolute), { recursive: true, mode: 448 });
+      import_node_fs.default.writeFileSync(
+        absolute,
+        `${JSON.stringify(
+          {
+            mcpServers: {
+              apptrace: {
+                command: process.execPath,
+                args: [serverEntry],
+                env
+              }
+            }
+          },
+          null,
+          2
+        )}
+`,
+        { mode: 384 }
+      );
+    } else if (extension === ".toml") {
+      import_node_fs.default.mkdirSync(import_node_path.default.dirname(absolute), { recursive: true, mode: 448 });
+      const toml = [
+        "[mcp_servers.apptrace]",
+        `command = ${JSON.stringify(process.execPath)}`,
+        `args = [${JSON.stringify(serverEntry)}]`,
+        `env = { APPTRACE_WORKSPACE_ROOT = ${JSON.stringify(
+          env.APPTRACE_WORKSPACE_ROOT
+        )}, APPTRACE_ENGINE_PATH = ${JSON.stringify(
+          env.APPTRACE_ENGINE_PATH
+        )}, APPTRACE_ANALYSIS_ENGINE_PATH = ${JSON.stringify(
+          env.APPTRACE_ANALYSIS_ENGINE_PATH
+        )}, APPTRACE_IPATOOL_PATH = ${JSON.stringify(
+          env.APPTRACE_IPATOOL_PATH
+        )} }`,
+        ""
+      ].join("\n");
+      import_node_fs.default.writeFileSync(absolute, toml, { mode: 384 });
+    } else {
+      throw new import_metadata.CoreFailure(
+        "INVALID_CONFIG_FORMAT",
+        "--write-config \u53EA\u652F\u6301 .json \u6216 .toml \u6587\u4EF6\u3002"
+      );
+    }
+    if (json) {
+      process.stderr.write(`MCP config written: ${absolute}
+`);
+      return;
+    }
+    console.log(`MCP config written: ${absolute}`);
+  }
+  console.log(`
+MCP configuration:
+
+[mcp_servers.apptrace]
+command = "${process.execPath.replace(/\\/g, "\\\\")}"
+args = ["${serverEntry.replace(/\\/g, "\\\\")}"]
+env = { APPTRACE_WORKSPACE_ROOT = "${env.APPTRACE_WORKSPACE_ROOT.replace(/\\/g, "\\\\")}", APPTRACE_ENGINE_PATH = "${env.APPTRACE_ENGINE_PATH.replace(/\\/g, "\\\\")}", APPTRACE_ANALYSIS_ENGINE_PATH = "${env.APPTRACE_ANALYSIS_ENGINE_PATH.replace(/\\/g, "\\\\")}", APPTRACE_IPATOOL_PATH = "${env.APPTRACE_IPATOOL_PATH.replace(/\\/g, "\\\\")}" }
+
+\u9996\u6B21\u5199\u5165\u914D\u7F6E\u540E\u91CD\u8F7D\u4E00\u6B21 Agent \u5BA2\u6237\u7AEF\u3002
+`);
+}
+async function authLogin() {
+  const config = (0, import_metadata.loadConfig)();
+  const code = await interactive(config.ipatoolPath, ["auth", "login"]);
+  if (code !== 0) {
+    throw new import_metadata.CoreFailure(
+      "AUTH_FAILED",
+      `ipatool \u767B\u5F55\u6CA1\u6709\u6210\u529F\uFF0C\u9000\u51FA\u7801\uFF1A${code ?? "unknown"}`
+    );
+  }
+  await authStatus();
+}
+async function authStatus() {
+  await withCore(async (core) => {
+    const status = await core.handle(import_shared.CHANNELS.accountStatus, { force: true });
+    printJson(status);
+  });
+}
+async function addTarget(source) {
+  await withCore(async (core) => {
+    const resolved = await core.handle(import_shared.CHANNELS.targetsResolve, {
+      input: source
+    });
+    const target = await core.handle(import_shared.CHANNELS.targetsCreate, {
+      resolutionId: resolved.resolutionId
+    });
+    printJson(target);
+  });
+}
+async function listTargets() {
+  await withCore(async (core) => {
+    printJson(await core.handle(import_shared.CHANNELS.targetsList, {}));
+  });
+}
+async function analyze(source, args) {
+  const goals = parseGoals(option(args, "--goals"));
+  const json = hasFlag(args, "--json");
+  const force = hasFlag(args, "--force");
+  const targetId = option(args, "--target");
+  if (!source && !targetId) {
+    throw new import_metadata.CoreFailure("SOURCE_REQUIRED", "\u7F3A\u5C11\u5E94\u7528\u94FE\u63A5\u3001ID \u6216 --target\u3002");
+  }
+  await withCore(async (core) => {
+    const service = new import_metadata.AppAnalysisService(core);
+    const result = await service.analyzeApp({
+      source: targetId ? void 0 : source,
+      targetId,
+      goals,
+      force,
+      onProgress: (event) => {
+        if (!json) {
+          process.stderr.write(
+            `[${event.step}] ${event.status}${event.message ? ` \u2014 ${event.message}` : ""}
+`
+          );
+        }
+      }
+    });
+    if (json) {
+      printJson(result);
+    } else {
+      printAnalysis(result);
+    }
+  });
+}
+function printAnalysis(result) {
+  console.log(`
+${result.targetName}`);
+  console.log(`Target: ${result.targetId}`);
+  console.log(`Artifact: ${result.artifact.sha256}`);
+  console.log(
+    `Technology: ${result.technology?.hints.join(" / ") || "unknown"}`
+  );
+  console.log(`Routes: ${result.routes?.count ?? 0}`);
+  console.log(`Modules: ${result.modules?.count ?? 0}`);
+  console.log(`Network endpoints: ${result.networkEndpoints?.count ?? 0}`);
+  if (result.native) {
+    console.log(
+      `Native: ${result.native.procedureCount ?? "?"} procedures, ${result.native.stringCount ?? "?"} strings`
+    );
+    if (result.native.warning) console.log(`Warning: ${result.native.warning}`);
+  }
+  if (result.reportPath) console.log(`Report: ${result.reportPath}`);
+  for (const evidencePath of result.evidencePaths) {
+    console.log(`Evidence: ${evidencePath}`);
+  }
+  if (result.limitations.length > 0) {
+    console.log("Limitations:");
+    for (const limitation of result.limitations.slice(0, 6)) {
+      console.log(`  - ${limitation}`);
+    }
+  }
+}
+async function report(targetId) {
+  await withCore(async (core) => {
+    const service = new import_metadata.AppAnalysisService(core);
+    printJson(await service.runCapability(targetId, "generate:report"));
+  });
+}
+async function getJob(jobId) {
+  await withCore(async (core) => {
+    const result = await core.handle(import_shared.CHANNELS.jobsGet, { jobId });
+    printJson({ ...result, events: result.events.slice(-50) });
+  });
+}
+async function searchFindings(targetId, query, args) {
+  const types = option(args, "--type")?.split(",").map((value) => value.trim()).filter(Boolean);
+  const limit = Number(option(args, "--limit") ?? 50);
+  await withCore(async (core) => {
+    printJson(
+      await core.handle(import_shared.CHANNELS.findingsSearch, {
+        targetId,
+        query,
+        types,
+        limit: Number.isFinite(limit) ? limit : 50
+      })
+    );
+  });
+}
+async function nativeCommand(action, args) {
+  const targetId = args[0];
+  const value = args[1];
+  if (!targetId || !value) {
+    throw new import_metadata.CoreFailure(
+      "INVALID_INPUT",
+      "\u7528\u6CD5\uFF1Aapptrace native <search|decompile> <target-id> <query-or-function>"
+    );
+  }
+  await withCore(async (core) => {
+    const service = new import_metadata.AppAnalysisService(core);
+    if (action === "search") {
+      printJson(
+        await service.runCapability(targetId, "native:search", {
+          query: value,
+          kind: option(args, "--kind") ?? "procedures",
+          mode: option(args, "--mode") ?? "literal"
+        })
+      );
+      return;
+    }
+    if (action === "decompile") {
+      printJson(
+        await service.runCapability(targetId, "native:decompile", {
+          functionName: value
+        })
+      );
+      return;
+    }
+    throw new import_metadata.CoreFailure(
+      "INVALID_INPUT",
+      "\u539F\u751F\u547D\u4EE4\u53EA\u652F\u6301 search \u6216 decompile\u3002"
+    );
+  });
+}
+async function evidence(targetId) {
+  await withCore(async (core) => {
+    printJson(
+      await core.handle(import_shared.CHANNELS.evidenceList, {
+        targetId
+      })
+    );
+  });
+}
+async function installEngine(file, args) {
+  const config = (0, import_metadata.loadConfig)();
+  const expected = option(args, "--sha256");
+  const installed = (0, import_metadata.installEngineArtifact)(config.workspaceRoot, file, expected);
+  printJson(installed);
+}
+async function compare(targetId, leftArtifactId, rightArtifactId, args) {
+  if (!targetId || !leftArtifactId || !rightArtifactId) {
+    throw new import_metadata.CoreFailure(
+      "INVALID_INPUT",
+      "\u7528\u6CD5\uFF1Aapptrace compare <target-id> <left-artifact-id> <right-artifact-id>"
+    );
+  }
+  await withCore(async (core) => {
+    printJson(
+      await new import_metadata.VersionComparisonService(core).compare(
+        targetId,
+        leftArtifactId,
+        rightArtifactId,
+        { force: hasFlag(args, "--force") }
+      )
+    );
+  });
+}
+async function capabilities(targetId) {
+  await withCore(async (core) => {
+    printJson(
+      await core.handle(import_shared.CHANNELS.capabilitiesList, {
+        ...targetId ? { targetId } : {}
+      })
+    );
+  });
+}
+async function main() {
+  const [command, subcommand, ...args] = process.argv.slice(2);
+  if (!command || ["help", "-h", "--help"].includes(command)) {
+    usage();
+    return;
+  }
+  if (command === "setup") {
+    const setupArgs = subcommand?.startsWith("--") && subcommand ? [subcommand, ...args] : args;
+    return setup(hasFlag(setupArgs, "--json"), setupArgs);
+  }
+  if (command === "doctor") {
+    const doctorArgs = subcommand?.startsWith("--") && subcommand ? [subcommand, ...args] : args;
+    return doctor(hasFlag(doctorArgs, "--json"));
+  }
+  if (command === "auth") {
+    if (subcommand === "login") return authLogin();
+    if (subcommand === "status") return authStatus();
+  }
+  if (command === "targets") {
+    if (subcommand === "add") {
+      const source = positional(args);
+      if (!source) throw new import_metadata.CoreFailure("SOURCE_REQUIRED", "\u7F3A\u5C11\u5E94\u7528\u94FE\u63A5\u6216 ID\u3002");
+      return addTarget(source);
+    }
+    if (subcommand === "list") return listTargets();
+  }
+  if (command === "analyze") {
+    const analyzeArgs = subcommand?.startsWith("--") && subcommand ? [subcommand, ...args] : args;
+    const source = subcommand && !subcommand.startsWith("--") ? subcommand : positional(analyzeArgs);
+    return analyze(source, analyzeArgs);
+  }
+  if (command === "report") {
+    if (!subcommand) throw new import_metadata.CoreFailure("TARGET_REQUIRED", "\u7F3A\u5C11 target ID\u3002");
+    return report(subcommand);
+  }
+  if (command === "jobs" && subcommand === "get") {
+    const jobId = positional(args);
+    if (!jobId) throw new import_metadata.CoreFailure("JOB_REQUIRED", "\u7F3A\u5C11 job ID\u3002");
+    return getJob(jobId);
+  }
+  if (command === "search") {
+    if (!subcommand) throw new import_metadata.CoreFailure("TARGET_REQUIRED", "\u7F3A\u5C11 target ID\u3002");
+    return searchFindings(subcommand, args[0], args);
+  }
+  if (command === "native") return nativeCommand(subcommand, args);
+  if (command === "evidence") {
+    if (!subcommand) throw new import_metadata.CoreFailure("TARGET_REQUIRED", "\u7F3A\u5C11 target ID\u3002");
+    return evidence(subcommand);
+  }
+  if (command === "engine" && subcommand === "install") {
+    const file = args[0];
+    if (!file) throw new import_metadata.CoreFailure("ENGINE_REQUIRED", "\u7F3A\u5C11 engine \u6587\u4EF6\u8DEF\u5F84\u3002");
+    return installEngine(file, args);
+  }
+  if (command === "compare") {
+    if (!subcommand) throw new import_metadata.CoreFailure("TARGET_REQUIRED", "\u7F3A\u5C11 target ID\u3002");
+    return compare(subcommand, args[0], args[1], args);
+  }
+  if (command === "capabilities") return capabilities(subcommand);
+  if (command === "mcp") {
+    const { startMcpServer } = await import("@zhuixin/mcp");
+    await startMcpServer((0, import_metadata.loadConfig)());
+    return;
+  }
+  usage();
+  throw new import_metadata.CoreFailure("UNKNOWN_COMMAND", `\u672A\u77E5\u547D\u4EE4\uFF1A${command}`);
+}
+void main().catch((error) => {
+  printError(error);
+  process.exitCode = 1;
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { spawn } from \"node:child_process\";\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport {\n  AppAnalysisService,\n  CoreFailure,\n  CoreServer,\n  installEngineArtifact,\n  VersionComparisonService,\n  loadConfig,\n  type AnalysisGoal,\n  type AnalyzeAppResult\n} from \"@zhuixin/metadata\";\nimport {\n  CHANNELS,\n  type CapabilityDescriptor,\n  type HealthInfo,\n  type JobRecord,\n  type TargetRecord\n} from \"@zhuixin/shared\";\n\nconst GOALS: AnalysisGoal[] = [\n  \"tech_stack\",\n  \"feature_map\",\n  \"network\",\n  \"native_risk\",\n  \"report\"\n];\n\nfunction usage(): void {\n  console.log(`AppTrace 0.1.0\n\nUsage:\n  apptrace setup [--json] [--install] [--write-config <path>]\n  apptrace doctor [--json]\n  apptrace auth login\n  apptrace auth status\n  apptrace targets add <app-store-url-or-id>\n  apptrace targets list\n  apptrace analyze [app-store-url-or-id] [--target <target-id>] [--goals ...] [--force]\n  apptrace report <target-id>\n  apptrace jobs get <job-id>\n  apptrace search <target-id> [query] [--type route,module] [--limit 50]\n  apptrace native search <target-id> <query> [--kind procedures|strings]\n  apptrace native decompile <target-id> <function-name>\n  apptrace evidence <target-id>\n  apptrace compare <target-id> <left-artifact-id> <right-artifact-id> [--force]\n  apptrace capabilities [target-id]\n  apptrace engine install <engine-file> [--sha256 <digest>]\n  apptrace mcp\n\nExamples:\n  apptrace analyze https://apps.apple.com/cn/app/id1616124777\n  apptrace analyze 1616124777 --goals tech_stack,feature_map,native_risk,report\n`);\n}\n\nfunction option(args: string[], name: string): string | undefined {\n  const index = args.indexOf(name);\n  if (index >= 0 && args[index + 1]) return args[index + 1];\n  const prefix = `${name}=`;\n  const inline = args.find((arg) => arg.startsWith(prefix));\n  return inline ? inline.slice(prefix.length) : undefined;\n}\n\nfunction hasFlag(args: string[], name: string): boolean {\n  return args.includes(name);\n}\n\nfunction positional(args: string[]): string | undefined {\n  return args.find((arg) => !arg.startsWith(\"--\"));\n}\n\nfunction parseGoals(value: string | undefined): AnalysisGoal[] {\n  if (!value) return [\"tech_stack\", \"feature_map\", \"report\"];\n  const goals = value\n    .split(\",\")\n    .map((item) => item.trim())\n    .filter(Boolean);\n  const invalid = goals.filter(\n    (goal): goal is string => !GOALS.includes(goal as AnalysisGoal)\n  );\n  if (invalid.length > 0) {\n    throw new CoreFailure(\n      \"INVALID_INPUT\",\n      `未知分析目标：${invalid.join(\", \")}。可选：${GOALS.join(\", \")}`\n    );\n  }\n  return goals as AnalysisGoal[];\n}\n\nfunction printJson(value: unknown): void {\n  process.stdout.write(`${JSON.stringify(value, null, 2)}\\n`);\n}\n\nfunction printError(error: unknown): void {\n  if (error instanceof CoreFailure) {\n    console.error(`${error.code}: ${error.message}`);\n    if (error.code === \"AUTH_REQUIRED\" || error.code === \"KEYCHAIN_LOCKED\") {\n      console.error(\"Next: apptrace auth login\");\n    } else if (error.code === \"LICENSE_REQUIRED\") {\n      console.error(\"Next: 在 iPhone App Store 获取或购买该应用后重试。\");\n    }\n    return;\n  }\n  console.error(error instanceof Error ? error.stack ?? error.message : String(error));\n}\n\nfunction withCore<T>(operation: (core: CoreServer) => Promise<T>): Promise<T> {\n  const core = new CoreServer({ config: loadConfig(), emit: () => {} });\n  return operation(core).finally(() => core.close());\n}\n\nfunction interactive(\n  command: string,\n  args: string[],\n  env?: NodeJS.ProcessEnv\n): Promise<number | null> {\n  return new Promise((resolve, reject) => {\n    const isWindowsCommand =\n      process.platform === \"win32\" &&\n      [\".cmd\", \".bat\"].includes(path.extname(command).toLowerCase());\n    const child = isWindowsCommand\n      ? spawn(\n          process.env.ComSpec || \"cmd.exe\",\n          [\"/d\", \"/s\", \"/c\", `\"${command}\" ${args.join(\" \")}`],\n          {\n            stdio: \"inherit\",\n            windowsVerbatimArguments: true,\n            env: env ? { ...process.env, ...env } : process.env\n          }\n        )\n      : spawn(command, args, {\n          stdio: \"inherit\",\n          env: env ? { ...process.env, ...env } : process.env\n        });\n    child.on(\"error\", reject);\n    child.on(\"exit\", (code) => resolve(code));\n  });\n}\n\nasync function doctor(json: boolean): Promise<void> {\n  const config = loadConfig();\n  await withCore(async (core) => {\n    const health = (await core.handle(CHANNELS.health, {})) as HealthInfo;\n    const capabilities = (await core.handle(\n      CHANNELS.capabilitiesList,\n      {}\n    )) as CapabilityDescriptor[];\n    const result = { config, health, capabilities };\n    if (json) {\n      printJson(result);\n      return;\n    }\n    console.log(`workspace: ${health.workspaceRoot}`);\n    console.log(`host:      ${health.hostPlatform}`);\n    console.log(`store:     ${health.store}`);\n    console.log(\"tools:\");\n    for (const tool of health.tools ?? []) {\n      console.log(\n        `  ${tool.available ? \"OK  \" : \"MISS\"} ${tool.label}: ${tool.path}`\n      );\n    }\n    console.log(\"capabilities:\");\n    for (const capability of capabilities) {\n      console.log(\n        `  ${capability.available ? \"OK  \" : \"NO  \"} ${capability.id}${\n          capability.reason ? ` — ${capability.reason}` : \"\"\n        }`\n      );\n    }\n  });\n}\n\nfunction createEngineLauncher(workspaceRoot: string): string {\n  const reaScript = require.resolve(\"rea-agents/scripts/rea.mjs\");\n  const tools = path.join(workspaceRoot, \"tools\");\n  const javaHome = path.join(tools, \"jdk\");\n  const ghidraHome = path.join(tools, \"ghidra_12.1.4_PUBLIC\");\n  const ghidraUserHome = path.join(workspaceRoot, \".ghidra-home\");\n  fs.mkdirSync(path.join(tools, \"bin\"), { recursive: true, mode: 0o700 });\n  fs.mkdirSync(ghidraUserHome, { recursive: true, mode: 0o700 });\n  const launcher = path.join(\n    tools,\n    \"bin\",\n    process.platform === \"win32\" ? \"rea.cmd\" : \"rea\"\n  );\n  if (process.platform === \"win32\") {\n    fs.writeFileSync(\n      launcher,\n      [\n        \"@echo off\",\n        `set \"JAVA_HOME=${javaHome}\"`,\n        `set \"GHIDRA_INSTALL_DIR=${ghidraHome}\"`,\n        `set \"GHIDRA_USER_HOME=${ghidraUserHome}\"`,\n        'set \"PATH=%JAVA_HOME%\\\\bin;%PATH%\"',\n        `\"${process.execPath}\" \"${reaScript}\" %*`,\n        \"\"\n      ].join(\"\\r\\n\"),\n      { mode: 0o700 }\n    );\n  } else {\n    fs.writeFileSync(\n      launcher,\n      [\n        \"#!/usr/bin/env bash\",\n        \"set -euo pipefail\",\n        `export JAVA_HOME=${JSON.stringify(javaHome)}`,\n        `export GHIDRA_INSTALL_DIR=${JSON.stringify(ghidraHome)}`,\n        `export GHIDRA_USER_HOME=${JSON.stringify(ghidraUserHome)}`,\n        'export PATH=\"$JAVA_HOME/bin:$PATH\"',\n        'export JAVA_TOOL_OPTIONS=\"${JAVA_TOOL_OPTIONS:-} -Duser.home=$GHIDRA_USER_HOME\"',\n        `exec ${JSON.stringify(process.execPath)} ${JSON.stringify(reaScript)} \"$@\"`,\n        \"\"\n      ].join(\"\\n\"),\n      { mode: 0o700 }\n    );\n  }\n  return launcher;\n}\n\nasync function installTools(\n  config: ReturnType<typeof loadConfig>,\n  json = false\n): Promise<void> {\n  if (\n    fs.existsSync(config.enginePath) &&\n    fs.existsSync(config.ipatoolPath)\n  ) {\n    process.stderr.write(\"Tools already available; download skipped.\\n\");\n    return;\n  }\n  if (process.platform === \"win32\" && process.arch === \"x64\") {\n    const script = path.resolve(__dirname, \"../../scripts/bootstrap-tools.ps1\");\n    if (!fs.existsSync(script)) {\n      throw new CoreFailure(\"TOOL_INSTALLER_MISSING\", `找不到安装脚本：${script}`);\n    }\n    process.stderr.write(\n      \"Installing JDK, Ghidra and ipatool for Windows x64. This can take several minutes.\\n\"\n    );\n    const code = await interactive(\"powershell.exe\", [\n      \"-NoProfile\",\n      \"-ExecutionPolicy\",\n      \"Bypass\",\n      \"-File\",\n      script,\n      \"-WorkspaceRoot\",\n      config.workspaceRoot\n    ], {\n      APPTRACE_WORKSPACE_ROOT: config.workspaceRoot,\n      APPTRACE_TOOLS_DIR: path.join(config.workspaceRoot, \"tools\"),\n      ...(process.env.APPTRACE_IPATOOL_SHA256\n        ? { APPTRACE_IPATOOL_SHA256: process.env.APPTRACE_IPATOOL_SHA256 }\n        : {})\n    });\n    if (code !== 0) {\n      throw new CoreFailure(\n        \"TOOL_INSTALL_FAILED\",\n        `工具安装失败，退出码：${code ?? \"unknown\"}`\n      );\n    }\n    const launcher = createEngineLauncher(config.workspaceRoot);\n    process.stderr.write(`Analysis engine launcher: ${launcher}\\n`);\n    return;\n  }\n  if (process.platform !== \"darwin\" || process.arch !== \"arm64\") {\n    throw new CoreFailure(\n      \"TOOL_INSTALL_UNSUPPORTED\",\n      \"v1 自动安装器当前只支持 macOS arm64；其他平台请使用 APPTRACE_ENGINE_PATH 和 APPTRACE_IPATOOL_PATH。\"\n    );\n  }\n  const script = path.resolve(__dirname, \"../../scripts/bootstrap-tools.sh\");\n  if (!fs.existsSync(script)) {\n    throw new CoreFailure(\"TOOL_INSTALLER_MISSING\", `找不到安装脚本：${script}`);\n  }\n  process.stderr.write(\n    \"Installing JDK, Ghidra and ipatool. This can take several minutes.\\n\"\n  );\n  const code = await interactive(\"/bin/bash\", [script], {\n    APPTRACE_WORKSPACE_ROOT: config.workspaceRoot,\n    APPTRACE_TOOLS_DIR: path.join(config.workspaceRoot, \"tools\")\n  });\n  if (code !== 0) {\n    throw new CoreFailure(\n      \"TOOL_INSTALL_FAILED\",\n      `工具安装失败，退出码：${code ?? \"unknown\"}`\n    );\n  }\n  const launcher = createEngineLauncher(config.workspaceRoot);\n  process.stderr.write(`Analysis engine launcher: ${launcher}\\n`);\n}\n\nasync function setup(json: boolean, args: string[]): Promise<void> {\n  const configPath = option(args, \"--write-config\");\n  const config = loadConfig();\n  if (hasFlag(args, \"--install\")) {\n    await installTools(config, json);\n  }\n  await doctor(json);\n  if (json && !configPath) return;\n  const serverEntry = path.resolve(__dirname, \"../../mcp/dist/index.js\");\n  const env = {\n    APPTRACE_WORKSPACE_ROOT: config.workspaceRoot,\n    APPTRACE_ENGINE_PATH: config.enginePath,\n    APPTRACE_ANALYSIS_ENGINE_PATH: config.analysisEnginePath,\n    APPTRACE_IPATOOL_PATH: config.ipatoolPath\n  };\n  if (configPath) {\n    const absolute = path.resolve(configPath);\n    const extension = path.extname(absolute).toLowerCase();\n    if (extension === \".json\") {\n      fs.mkdirSync(path.dirname(absolute), { recursive: true, mode: 0o700 });\n      fs.writeFileSync(\n        absolute,\n        `${JSON.stringify(\n          {\n            mcpServers: {\n              apptrace: {\n                command: process.execPath,\n                args: [serverEntry],\n                env\n              }\n            }\n          },\n          null,\n          2\n        )}\\n`,\n        { mode: 0o600 }\n      );\n    } else if (extension === \".toml\") {\n      fs.mkdirSync(path.dirname(absolute), { recursive: true, mode: 0o700 });\n      const toml = [\n        \"[mcp_servers.apptrace]\",\n        `command = ${JSON.stringify(process.execPath)}`,\n        `args = [${JSON.stringify(serverEntry)}]`,\n        `env = { APPTRACE_WORKSPACE_ROOT = ${JSON.stringify(\n          env.APPTRACE_WORKSPACE_ROOT\n        )}, APPTRACE_ENGINE_PATH = ${JSON.stringify(\n          env.APPTRACE_ENGINE_PATH\n        )}, APPTRACE_ANALYSIS_ENGINE_PATH = ${JSON.stringify(\n          env.APPTRACE_ANALYSIS_ENGINE_PATH\n        )}, APPTRACE_IPATOOL_PATH = ${JSON.stringify(\n          env.APPTRACE_IPATOOL_PATH\n        )} }`,\n        \"\"\n      ].join(\"\\n\");\n      fs.writeFileSync(absolute, toml, { mode: 0o600 });\n    } else {\n      throw new CoreFailure(\n        \"INVALID_CONFIG_FORMAT\",\n        \"--write-config 只支持 .json 或 .toml 文件。\"\n      );\n    }\n    if (json) {\n      process.stderr.write(`MCP config written: ${absolute}\\n`);\n      return;\n    }\n    console.log(`MCP config written: ${absolute}`);\n  }\n  console.log(`\nMCP configuration:\n\n[mcp_servers.apptrace]\ncommand = \"${process.execPath.replace(/\\\\/g, \"\\\\\\\\\")}\"\nargs = [\"${serverEntry.replace(/\\\\/g, \"\\\\\\\\\")}\"]\nenv = { APPTRACE_WORKSPACE_ROOT = \"${env.APPTRACE_WORKSPACE_ROOT.replace(/\\\\/g, \"\\\\\\\\\")}\", APPTRACE_ENGINE_PATH = \"${env.APPTRACE_ENGINE_PATH.replace(/\\\\/g, \"\\\\\\\\\")}\", APPTRACE_ANALYSIS_ENGINE_PATH = \"${env.APPTRACE_ANALYSIS_ENGINE_PATH.replace(/\\\\/g, \"\\\\\\\\\")}\", APPTRACE_IPATOOL_PATH = \"${env.APPTRACE_IPATOOL_PATH.replace(/\\\\/g, \"\\\\\\\\\")}\" }\n\n首次写入配置后重载一次 Agent 客户端。\n`);\n}\n\nasync function authLogin(): Promise<void> {\n  const config = loadConfig();\n  const code = await interactive(config.ipatoolPath, [\"auth\", \"login\"]);\n  if (code !== 0) {\n    throw new CoreFailure(\n      \"AUTH_FAILED\",\n      `ipatool 登录没有成功，退出码：${code ?? \"unknown\"}`\n    );\n  }\n  await authStatus();\n}\n\nasync function authStatus(): Promise<void> {\n  await withCore(async (core) => {\n    const status = await core.handle(CHANNELS.accountStatus, { force: true });\n    printJson(status);\n  });\n}\n\nasync function addTarget(source: string): Promise<void> {\n  await withCore(async (core) => {\n    const resolved = (await core.handle(CHANNELS.targetsResolve, {\n      input: source\n    })) as { resolutionId: string };\n    const target = (await core.handle(CHANNELS.targetsCreate, {\n      resolutionId: resolved.resolutionId\n    })) as TargetRecord;\n    printJson(target);\n  });\n}\n\nasync function listTargets(): Promise<void> {\n  await withCore(async (core) => {\n    printJson(await core.handle(CHANNELS.targetsList, {}));\n  });\n}\n\nasync function analyze(source: string | undefined, args: string[]): Promise<void> {\n  const goals = parseGoals(option(args, \"--goals\"));\n  const json = hasFlag(args, \"--json\");\n  const force = hasFlag(args, \"--force\");\n  const targetId = option(args, \"--target\");\n  if (!source && !targetId) {\n    throw new CoreFailure(\"SOURCE_REQUIRED\", \"缺少应用链接、ID 或 --target。\");\n  }\n  await withCore(async (core) => {\n    const service = new AppAnalysisService(core);\n    const result = await service.analyzeApp({\n      source: targetId ? undefined : source,\n      targetId,\n      goals,\n      force,\n      onProgress: (event) => {\n        if (!json) {\n          process.stderr.write(\n            `[${event.step}] ${event.status}${\n              event.message ? ` — ${event.message}` : \"\"\n            }\\n`\n          );\n        }\n      }\n    });\n    if (json) {\n      printJson(result);\n    } else {\n      printAnalysis(result);\n    }\n  });\n}\n\nfunction printAnalysis(result: AnalyzeAppResult): void {\n  console.log(`\\n${result.targetName}`);\n  console.log(`Target: ${result.targetId}`);\n  console.log(`Artifact: ${result.artifact.sha256}`);\n  console.log(\n    `Technology: ${result.technology?.hints.join(\" / \") || \"unknown\"}`\n  );\n  console.log(`Routes: ${result.routes?.count ?? 0}`);\n  console.log(`Modules: ${result.modules?.count ?? 0}`);\n  console.log(`Network endpoints: ${result.networkEndpoints?.count ?? 0}`);\n  if (result.native) {\n    console.log(\n      `Native: ${result.native.procedureCount ?? \"?\"} procedures, ${\n        result.native.stringCount ?? \"?\"\n      } strings`\n    );\n    if (result.native.warning) console.log(`Warning: ${result.native.warning}`);\n  }\n  if (result.reportPath) console.log(`Report: ${result.reportPath}`);\n  for (const evidencePath of result.evidencePaths) {\n    console.log(`Evidence: ${evidencePath}`);\n  }\n  if (result.limitations.length > 0) {\n    console.log(\"Limitations:\");\n    for (const limitation of result.limitations.slice(0, 6)) {\n      console.log(`  - ${limitation}`);\n    }\n  }\n}\n\nasync function report(targetId: string): Promise<void> {\n  await withCore(async (core) => {\n    const service = new AppAnalysisService(core);\n    printJson(await service.runCapability(targetId, \"generate:report\"));\n  });\n}\n\nasync function getJob(jobId: string): Promise<void> {\n  await withCore(async (core) => {\n    const result = (await core.handle(CHANNELS.jobsGet, { jobId })) as {\n      job: JobRecord;\n      events: unknown[];\n    };\n    printJson({ ...result, events: result.events.slice(-50) });\n  });\n}\n\nasync function searchFindings(\n  targetId: string,\n  query: string | undefined,\n  args: string[]\n): Promise<void> {\n  const types = option(args, \"--type\")\n    ?.split(\",\")\n    .map((value) => value.trim())\n    .filter(Boolean);\n  const limit = Number(option(args, \"--limit\") ?? 50);\n  await withCore(async (core) => {\n    printJson(\n      await core.handle(CHANNELS.findingsSearch, {\n        targetId,\n        query,\n        types,\n        limit: Number.isFinite(limit) ? limit : 50\n      })\n    );\n  });\n}\n\nasync function nativeCommand(\n  action: string | undefined,\n  args: string[]\n): Promise<void> {\n  const targetId = args[0];\n  const value = args[1];\n  if (!targetId || !value) {\n    throw new CoreFailure(\n      \"INVALID_INPUT\",\n      \"用法：apptrace native <search|decompile> <target-id> <query-or-function>\"\n    );\n  }\n  await withCore(async (core) => {\n    const service = new AppAnalysisService(core);\n    if (action === \"search\") {\n      printJson(\n        await service.runCapability(targetId, \"native:search\", {\n          query: value,\n          kind: option(args, \"--kind\") ?? \"procedures\",\n          mode: option(args, \"--mode\") ?? \"literal\"\n        })\n      );\n      return;\n    }\n    if (action === \"decompile\") {\n      printJson(\n        await service.runCapability(targetId, \"native:decompile\", {\n          functionName: value\n        })\n      );\n      return;\n    }\n    throw new CoreFailure(\n      \"INVALID_INPUT\",\n      \"原生命令只支持 search 或 decompile。\"\n    );\n  });\n}\n\nasync function evidence(targetId: string): Promise<void> {\n  await withCore(async (core) => {\n    printJson(\n      await core.handle(CHANNELS.evidenceList, {\n        targetId\n      })\n    );\n  });\n}\n\nasync function installEngine(file: string, args: string[]): Promise<void> {\n  const config = loadConfig();\n  const expected = option(args, \"--sha256\");\n  const installed = installEngineArtifact(config.workspaceRoot, file, expected);\n  printJson(installed);\n}\n\nasync function compare(\n  targetId: string | undefined,\n  leftArtifactId: string | undefined,\n  rightArtifactId: string | undefined,\n  args: string[]\n): Promise<void> {\n  if (!targetId || !leftArtifactId || !rightArtifactId) {\n    throw new CoreFailure(\n      \"INVALID_INPUT\",\n      \"用法：apptrace compare <target-id> <left-artifact-id> <right-artifact-id>\"\n    );\n  }\n  await withCore(async (core) => {\n    printJson(\n      await new VersionComparisonService(core).compare(\n        targetId,\n        leftArtifactId,\n        rightArtifactId,\n        { force: hasFlag(args, \"--force\") }\n      )\n    );\n  });\n}\n\nasync function capabilities(targetId?: string): Promise<void> {\n  await withCore(async (core) => {\n    printJson(\n      await core.handle(CHANNELS.capabilitiesList, {\n        ...(targetId ? { targetId } : {})\n      })\n    );\n  });\n}\n\nasync function main(): Promise<void> {\n  const [command, subcommand, ...args] = process.argv.slice(2);\n  if (!command || [\"help\", \"-h\", \"--help\"].includes(command)) {\n    usage();\n    return;\n  }\n  if (command === \"setup\") {\n    const setupArgs =\n      subcommand?.startsWith(\"--\") && subcommand\n        ? [subcommand, ...args]\n        : args;\n    return setup(hasFlag(setupArgs, \"--json\"), setupArgs);\n  }\n  if (command === \"doctor\") {\n    const doctorArgs =\n      subcommand?.startsWith(\"--\") && subcommand\n        ? [subcommand, ...args]\n        : args;\n    return doctor(hasFlag(doctorArgs, \"--json\"));\n  }\n  if (command === \"auth\") {\n    if (subcommand === \"login\") return authLogin();\n    if (subcommand === \"status\") return authStatus();\n  }\n  if (command === \"targets\") {\n    if (subcommand === \"add\") {\n      const source = positional(args);\n      if (!source) throw new CoreFailure(\"SOURCE_REQUIRED\", \"缺少应用链接或 ID。\");\n      return addTarget(source);\n    }\n    if (subcommand === \"list\") return listTargets();\n  }\n  if (command === \"analyze\") {\n    const analyzeArgs =\n      subcommand?.startsWith(\"--\") && subcommand\n        ? [subcommand, ...args]\n        : args;\n    const source =\n      subcommand && !subcommand.startsWith(\"--\")\n        ? subcommand\n        : positional(analyzeArgs);\n    return analyze(source, analyzeArgs);\n  }\n  if (command === \"report\") {\n    if (!subcommand) throw new CoreFailure(\"TARGET_REQUIRED\", \"缺少 target ID。\");\n    return report(subcommand);\n  }\n  if (command === \"jobs\" && subcommand === \"get\") {\n    const jobId = positional(args);\n    if (!jobId) throw new CoreFailure(\"JOB_REQUIRED\", \"缺少 job ID。\");\n    return getJob(jobId);\n  }\n  if (command === \"search\") {\n    if (!subcommand) throw new CoreFailure(\"TARGET_REQUIRED\", \"缺少 target ID。\");\n    return searchFindings(subcommand, args[0], args);\n  }\n  if (command === \"native\") return nativeCommand(subcommand, args);\n  if (command === \"evidence\") {\n    if (!subcommand) throw new CoreFailure(\"TARGET_REQUIRED\", \"缺少 target ID。\");\n    return evidence(subcommand);\n  }\n  if (command === \"engine\" && subcommand === \"install\") {\n    const file = args[0];\n    if (!file) throw new CoreFailure(\"ENGINE_REQUIRED\", \"缺少 engine 文件路径。\");\n    return installEngine(file, args);\n  }\n  if (command === \"compare\") {\n    if (!subcommand) throw new CoreFailure(\"TARGET_REQUIRED\", \"缺少 target ID。\");\n    return compare(subcommand, args[0], args[1], args);\n  }\n  if (command === \"capabilities\") return capabilities(subcommand);\n  if (command === \"mcp\") {\n    const { startMcpServer } = await import(\"@zhuixin/mcp\");\n    await startMcpServer(loadConfig());\n    return;\n  }\n  usage();\n  throw new CoreFailure(\"UNKNOWN_COMMAND\", `未知命令：${command}`);\n}\n\nvoid main().catch((error) => {\n  printError(error);\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AACA,gCAAsB;AACtB,qBAAe;AACf,uBAAiB;AACjB,sBASO;AACP,oBAMO;AAEP,IAAM,QAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,QAAc;AACrB,UAAQ,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAwBb;AACD;AAEA,SAAS,OAAO,MAAgB,MAAkC;AAChE,QAAM,QAAQ,KAAK,QAAQ,IAAI;AAC/B,MAAI,SAAS,KAAK,KAAK,QAAQ,CAAC,EAAG,QAAO,KAAK,QAAQ,CAAC;AACxD,QAAM,SAAS,GAAG,IAAI;AACtB,QAAM,SAAS,KAAK,KAAK,CAAC,QAAQ,IAAI,WAAW,MAAM,CAAC;AACxD,SAAO,SAAS,OAAO,MAAM,OAAO,MAAM,IAAI;AAChD;AAEA,SAAS,QAAQ,MAAgB,MAAuB;AACtD,SAAO,KAAK,SAAS,IAAI;AAC3B;AAEA,SAAS,WAAW,MAAoC;AACtD,SAAO,KAAK,KAAK,CAAC,QAAQ,CAAC,IAAI,WAAW,IAAI,CAAC;AACjD;AAEA,SAAS,WAAW,OAA2C;AAC7D,MAAI,CAAC,MAAO,QAAO,CAAC,cAAc,eAAe,QAAQ;AACzD,QAAM,QAAQ,MACX,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO;AACjB,QAAM,UAAU,MAAM;AAAA,IACpB,CAAC,SAAyB,CAAC,MAAM,SAAS,IAAoB;AAAA,EAChE;AACA,MAAI,QAAQ,SAAS,GAAG;AACtB,UAAM,IAAI;AAAA,MACR;AAAA,MACA,6CAAU,QAAQ,KAAK,IAAI,CAAC,2BAAO,MAAM,KAAK,IAAI,CAAC;AAAA,IACrD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,UAAU,OAAsB;AACvC,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,CAAI;AAC5D;AAEA,SAAS,WAAW,OAAsB;AACxC,MAAI,iBAAiB,6BAAa;AAChC,YAAQ,MAAM,GAAG,MAAM,IAAI,KAAK,MAAM,OAAO,EAAE;AAC/C,QAAI,MAAM,SAAS,mBAAmB,MAAM,SAAS,mBAAmB;AACtE,cAAQ,MAAM,2BAA2B;AAAA,IAC3C,WAAW,MAAM,SAAS,oBAAoB;AAC5C,cAAQ,MAAM,wGAAuC;AAAA,IACvD;AACA;AAAA,EACF;AACA,UAAQ,MAAM,iBAAiB,QAAQ,MAAM,SAAS,MAAM,UAAU,OAAO,KAAK,CAAC;AACrF;AAEA,SAAS,SAAY,WAAyD;AAC5E,QAAM,OAAO,IAAI,2BAAW,EAAE,YAAQ,4BAAW,GAAG,MAAM,MAAM;AAAA,EAAC,EAAE,CAAC;AACpE,SAAO,UAAU,IAAI,EAAE,QAAQ,MAAM,KAAK,MAAM,CAAC;AACnD;AAEA,SAAS,YACP,SACA,MACA,KACwB;AACxB,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,mBACJ,QAAQ,aAAa,WACrB,CAAC,QAAQ,MAAM,EAAE,SAAS,iBAAAA,QAAK,QAAQ,OAAO,EAAE,YAAY,CAAC;AAC/D,UAAM,QAAQ,uBACV;AAAA,MACE,QAAQ,IAAI,WAAW;AAAA,MACvB,CAAC,MAAM,MAAM,MAAM,IAAI,OAAO,KAAK,KAAK,KAAK,GAAG,CAAC,EAAE;AAAA,MACnD;AAAA,QACE,OAAO;AAAA,QACP,0BAA0B;AAAA,QAC1B,KAAK,MAAM,EAAE,GAAG,QAAQ,KAAK,GAAG,IAAI,IAAI,QAAQ;AAAA,MAClD;AAAA,IACF,QACA,iCAAM,SAAS,MAAM;AAAA,MACnB,OAAO;AAAA,MACP,KAAK,MAAM,EAAE,GAAG,QAAQ,KAAK,GAAG,IAAI,IAAI,QAAQ;AAAA,IAClD,CAAC;AACL,UAAM,GAAG,SAAS,MAAM;AACxB,UAAM,GAAG,QAAQ,CAAC,SAAS,QAAQ,IAAI,CAAC;AAAA,EAC1C,CAAC;AACH;AAEA,eAAe,OAAO,MAA8B;AAClD,QAAM,aAAS,4BAAW;AAC1B,QAAM,SAAS,OAAO,SAAS;AAC7B,UAAM,SAAU,MAAM,KAAK,OAAO,uBAAS,QAAQ,CAAC,CAAC;AACrD,UAAMC,gBAAgB,MAAM,KAAK;AAAA,MAC/B,uBAAS;AAAA,MACT,CAAC;AAAA,IACH;AACA,UAAM,SAAS,EAAE,QAAQ,QAAQ,cAAAA,cAAa;AAC9C,QAAI,MAAM;AACR,gBAAU,MAAM;AAChB;AAAA,IACF;AACA,YAAQ,IAAI,cAAc,OAAO,aAAa,EAAE;AAChD,YAAQ,IAAI,cAAc,OAAO,YAAY,EAAE;AAC/C,YAAQ,IAAI,cAAc,OAAO,KAAK,EAAE;AACxC,YAAQ,IAAI,QAAQ;AACpB,eAAW,QAAQ,OAAO,SAAS,CAAC,GAAG;AACrC,cAAQ;AAAA,QACN,KAAK,KAAK,YAAY,SAAS,MAAM,IAAI,KAAK,KAAK,KAAK,KAAK,IAAI;AAAA,MACnE;AAAA,IACF;AACA,YAAQ,IAAI,eAAe;AAC3B,eAAW,cAAcA,eAAc;AACrC,cAAQ;AAAA,QACN,KAAK,WAAW,YAAY,SAAS,MAAM,IAAI,WAAW,EAAE,GAC1D,WAAW,SAAS,WAAM,WAAW,MAAM,KAAK,EAClD;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,SAAS,qBAAqB,eAA+B;AAC3D,QAAM,YAAY,gBAAgB,4BAA4B;AAC9D,QAAM,QAAQ,iBAAAD,QAAK,KAAK,eAAe,OAAO;AAC9C,QAAM,WAAW,iBAAAA,QAAK,KAAK,OAAO,KAAK;AACvC,QAAM,aAAa,iBAAAA,QAAK,KAAK,OAAO,sBAAsB;AAC1D,QAAM,iBAAiB,iBAAAA,QAAK,KAAK,eAAe,cAAc;AAC9D,iBAAAE,QAAG,UAAU,iBAAAF,QAAK,KAAK,OAAO,KAAK,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACtE,iBAAAE,QAAG,UAAU,gBAAgB,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC7D,QAAM,WAAW,iBAAAF,QAAK;AAAA,IACpB;AAAA,IACA;AAAA,IACA,QAAQ,aAAa,UAAU,YAAY;AAAA,EAC7C;AACA,MAAI,QAAQ,aAAa,SAAS;AAChC,mBAAAE,QAAG;AAAA,MACD;AAAA,MACA;AAAA,QACE;AAAA,QACA,kBAAkB,QAAQ;AAAA,QAC1B,2BAA2B,UAAU;AAAA,QACrC,yBAAyB,cAAc;AAAA,QACvC;AAAA,QACA,IAAI,QAAQ,QAAQ,MAAM,SAAS;AAAA,QACnC;AAAA,MACF,EAAE,KAAK,MAAM;AAAA,MACb,EAAE,MAAM,IAAM;AAAA,IAChB;AAAA,EACF,OAAO;AACL,mBAAAA,QAAG;AAAA,MACD;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,oBAAoB,KAAK,UAAU,QAAQ,CAAC;AAAA,QAC5C,6BAA6B,KAAK,UAAU,UAAU,CAAC;AAAA,QACvD,2BAA2B,KAAK,UAAU,cAAc,CAAC;AAAA,QACzD;AAAA,QACA;AAAA,QACA,QAAQ,KAAK,UAAU,QAAQ,QAAQ,CAAC,IAAI,KAAK,UAAU,SAAS,CAAC;AAAA,QACrE;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,MACX,EAAE,MAAM,IAAM;AAAA,IAChB;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,aACb,QACA,OAAO,OACQ;AACf,MACE,eAAAA,QAAG,WAAW,OAAO,UAAU,KAC/B,eAAAA,QAAG,WAAW,OAAO,WAAW,GAChC;AACA,YAAQ,OAAO,MAAM,8CAA8C;AACnE;AAAA,EACF;AACA,MAAI,QAAQ,aAAa,WAAW,QAAQ,SAAS,OAAO;AAC1D,UAAMC,UAAS,iBAAAH,QAAK,QAAQ,WAAW,mCAAmC;AAC1E,QAAI,CAAC,eAAAE,QAAG,WAAWC,OAAM,GAAG;AAC1B,YAAM,IAAI,4BAAY,0BAA0B,mDAAWA,OAAM,EAAE;AAAA,IACrE;AACA,YAAQ,OAAO;AAAA,MACb;AAAA,IACF;AACA,UAAMC,QAAO,MAAM,YAAY,kBAAkB;AAAA,MAC/C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACAD;AAAA,MACA;AAAA,MACA,OAAO;AAAA,IACT,GAAG;AAAA,MACD,yBAAyB,OAAO;AAAA,MAChC,oBAAoB,iBAAAH,QAAK,KAAK,OAAO,eAAe,OAAO;AAAA,MAC3D,GAAI,QAAQ,IAAI,0BACZ,EAAE,yBAAyB,QAAQ,IAAI,wBAAwB,IAC/D,CAAC;AAAA,IACP,CAAC;AACD,QAAII,UAAS,GAAG;AACd,YAAM,IAAI;AAAA,QACR;AAAA,QACA,qEAAcA,SAAQ,SAAS;AAAA,MACjC;AAAA,IACF;AACA,UAAMC,YAAW,qBAAqB,OAAO,aAAa;AAC1D,YAAQ,OAAO,MAAM,6BAA6BA,SAAQ;AAAA,CAAI;AAC9D;AAAA,EACF;AACA,MAAI,QAAQ,aAAa,YAAY,QAAQ,SAAS,SAAS;AAC7D,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,SAAS,iBAAAL,QAAK,QAAQ,WAAW,kCAAkC;AACzE,MAAI,CAAC,eAAAE,QAAG,WAAW,MAAM,GAAG;AAC1B,UAAM,IAAI,4BAAY,0BAA0B,mDAAW,MAAM,EAAE;AAAA,EACrE;AACA,UAAQ,OAAO;AAAA,IACb;AAAA,EACF;AACA,QAAM,OAAO,MAAM,YAAY,aAAa,CAAC,MAAM,GAAG;AAAA,IACpD,yBAAyB,OAAO;AAAA,IAChC,oBAAoB,iBAAAF,QAAK,KAAK,OAAO,eAAe,OAAO;AAAA,EAC7D,CAAC;AACD,MAAI,SAAS,GAAG;AACd,UAAM,IAAI;AAAA,MACR;AAAA,MACA,qEAAc,QAAQ,SAAS;AAAA,IACjC;AAAA,EACF;AACA,QAAM,WAAW,qBAAqB,OAAO,aAAa;AAC1D,UAAQ,OAAO,MAAM,6BAA6B,QAAQ;AAAA,CAAI;AAChE;AAEA,eAAe,MAAM,MAAe,MAA+B;AACjE,QAAM,aAAa,OAAO,MAAM,gBAAgB;AAChD,QAAM,aAAS,4BAAW;AAC1B,MAAI,QAAQ,MAAM,WAAW,GAAG;AAC9B,UAAM,aAAa,QAAQ,IAAI;AAAA,EACjC;AACA,QAAM,OAAO,IAAI;AACjB,MAAI,QAAQ,CAAC,WAAY;AACzB,QAAM,cAAc,iBAAAA,QAAK,QAAQ,WAAW,yBAAyB;AACrE,QAAM,MAAM;AAAA,IACV,yBAAyB,OAAO;AAAA,IAChC,sBAAsB,OAAO;AAAA,IAC7B,+BAA+B,OAAO;AAAA,IACtC,uBAAuB,OAAO;AAAA,EAChC;AACA,MAAI,YAAY;AACd,UAAM,WAAW,iBAAAA,QAAK,QAAQ,UAAU;AACxC,UAAM,YAAY,iBAAAA,QAAK,QAAQ,QAAQ,EAAE,YAAY;AACrD,QAAI,cAAc,SAAS;AACzB,qBAAAE,QAAG,UAAU,iBAAAF,QAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACrE,qBAAAE,QAAG;AAAA,QACD;AAAA,QACA,GAAG,KAAK;AAAA,UACN;AAAA,YACE,YAAY;AAAA,cACV,UAAU;AAAA,gBACR,SAAS,QAAQ;AAAA,gBACjB,MAAM,CAAC,WAAW;AAAA,gBAClB;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA;AAAA,QACD,EAAE,MAAM,IAAM;AAAA,MAChB;AAAA,IACF,WAAW,cAAc,SAAS;AAChC,qBAAAA,QAAG,UAAU,iBAAAF,QAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACrE,YAAM,OAAO;AAAA,QACX;AAAA,QACA,aAAa,KAAK,UAAU,QAAQ,QAAQ,CAAC;AAAA,QAC7C,WAAW,KAAK,UAAU,WAAW,CAAC;AAAA,QACtC,qCAAqC,KAAK;AAAA,UACxC,IAAI;AAAA,QACN,CAAC,4BAA4B,KAAK;AAAA,UAChC,IAAI;AAAA,QACN,CAAC,qCAAqC,KAAK;AAAA,UACzC,IAAI;AAAA,QACN,CAAC,6BAA6B,KAAK;AAAA,UACjC,IAAI;AAAA,QACN,CAAC;AAAA,QACD;AAAA,MACF,EAAE,KAAK,IAAI;AACX,qBAAAE,QAAG,cAAc,UAAU,MAAM,EAAE,MAAM,IAAM,CAAC;AAAA,IAClD,OAAO;AACL,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,QAAI,MAAM;AACR,cAAQ,OAAO,MAAM,uBAAuB,QAAQ;AAAA,CAAI;AACxD;AAAA,IACF;AACA,YAAQ,IAAI,uBAAuB,QAAQ,EAAE;AAAA,EAC/C;AACA,UAAQ,IAAI;AAAA;AAAA;AAAA;AAAA,aAID,QAAQ,SAAS,QAAQ,OAAO,MAAM,CAAC;AAAA,WACzC,YAAY,QAAQ,OAAO,MAAM,CAAC;AAAA,qCACR,IAAI,wBAAwB,QAAQ,OAAO,MAAM,CAAC,8BAA8B,IAAI,qBAAqB,QAAQ,OAAO,MAAM,CAAC,uCAAuC,IAAI,8BAA8B,QAAQ,OAAO,MAAM,CAAC,+BAA+B,IAAI,sBAAsB,QAAQ,OAAO,MAAM,CAAC;AAAA;AAAA;AAAA,CAGjV;AACD;AAEA,eAAe,YAA2B;AACxC,QAAM,aAAS,4BAAW;AAC1B,QAAM,OAAO,MAAM,YAAY,OAAO,aAAa,CAAC,QAAQ,OAAO,CAAC;AACpE,MAAI,SAAS,GAAG;AACd,UAAM,IAAI;AAAA,MACR;AAAA,MACA,6EAAsB,QAAQ,SAAS;AAAA,IACzC;AAAA,EACF;AACA,QAAM,WAAW;AACnB;AAEA,eAAe,aAA4B;AACzC,QAAM,SAAS,OAAO,SAAS;AAC7B,UAAM,SAAS,MAAM,KAAK,OAAO,uBAAS,eAAe,EAAE,OAAO,KAAK,CAAC;AACxE,cAAU,MAAM;AAAA,EAClB,CAAC;AACH;AAEA,eAAe,UAAU,QAA+B;AACtD,QAAM,SAAS,OAAO,SAAS;AAC7B,UAAM,WAAY,MAAM,KAAK,OAAO,uBAAS,gBAAgB;AAAA,MAC3D,OAAO;AAAA,IACT,CAAC;AACD,UAAM,SAAU,MAAM,KAAK,OAAO,uBAAS,eAAe;AAAA,MACxD,cAAc,SAAS;AAAA,IACzB,CAAC;AACD,cAAU,MAAM;AAAA,EAClB,CAAC;AACH;AAEA,eAAe,cAA6B;AAC1C,QAAM,SAAS,OAAO,SAAS;AAC7B,cAAU,MAAM,KAAK,OAAO,uBAAS,aAAa,CAAC,CAAC,CAAC;AAAA,EACvD,CAAC;AACH;AAEA,eAAe,QAAQ,QAA4B,MAA+B;AAChF,QAAM,QAAQ,WAAW,OAAO,MAAM,SAAS,CAAC;AAChD,QAAM,OAAO,QAAQ,MAAM,QAAQ;AACnC,QAAM,QAAQ,QAAQ,MAAM,SAAS;AACrC,QAAM,WAAW,OAAO,MAAM,UAAU;AACxC,MAAI,CAAC,UAAU,CAAC,UAAU;AACxB,UAAM,IAAI,4BAAY,mBAAmB,oEAAuB;AAAA,EAClE;AACA,QAAM,SAAS,OAAO,SAAS;AAC7B,UAAM,UAAU,IAAI,mCAAmB,IAAI;AAC3C,UAAM,SAAS,MAAM,QAAQ,WAAW;AAAA,MACtC,QAAQ,WAAW,SAAY;AAAA,MAC/B;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,CAAC,UAAU;AACrB,YAAI,CAAC,MAAM;AACT,kBAAQ,OAAO;AAAA,YACb,IAAI,MAAM,IAAI,KAAK,MAAM,MAAM,GAC7B,MAAM,UAAU,WAAM,MAAM,OAAO,KAAK,EAC1C;AAAA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AACD,QAAI,MAAM;AACR,gBAAU,MAAM;AAAA,IAClB,OAAO;AACL,oBAAc,MAAM;AAAA,IACtB;AAAA,EACF,CAAC;AACH;AAEA,SAAS,cAAc,QAAgC;AACrD,UAAQ,IAAI;AAAA,EAAK,OAAO,UAAU,EAAE;AACpC,UAAQ,IAAI,WAAW,OAAO,QAAQ,EAAE;AACxC,UAAQ,IAAI,aAAa,OAAO,SAAS,MAAM,EAAE;AACjD,UAAQ;AAAA,IACN,eAAe,OAAO,YAAY,MAAM,KAAK,KAAK,KAAK,SAAS;AAAA,EAClE;AACA,UAAQ,IAAI,WAAW,OAAO,QAAQ,SAAS,CAAC,EAAE;AAClD,UAAQ,IAAI,YAAY,OAAO,SAAS,SAAS,CAAC,EAAE;AACpD,UAAQ,IAAI,sBAAsB,OAAO,kBAAkB,SAAS,CAAC,EAAE;AACvE,MAAI,OAAO,QAAQ;AACjB,YAAQ;AAAA,MACN,WAAW,OAAO,OAAO,kBAAkB,GAAG,gBAC5C,OAAO,OAAO,eAAe,GAC/B;AAAA,IACF;AACA,QAAI,OAAO,OAAO,QAAS,SAAQ,IAAI,YAAY,OAAO,OAAO,OAAO,EAAE;AAAA,EAC5E;AACA,MAAI,OAAO,WAAY,SAAQ,IAAI,WAAW,OAAO,UAAU,EAAE;AACjE,aAAW,gBAAgB,OAAO,eAAe;AAC/C,YAAQ,IAAI,aAAa,YAAY,EAAE;AAAA,EACzC;AACA,MAAI,OAAO,YAAY,SAAS,GAAG;AACjC,YAAQ,IAAI,cAAc;AAC1B,eAAW,cAAc,OAAO,YAAY,MAAM,GAAG,CAAC,GAAG;AACvD,cAAQ,IAAI,OAAO,UAAU,EAAE;AAAA,IACjC;AAAA,EACF;AACF;AAEA,eAAe,OAAO,UAAiC;AACrD,QAAM,SAAS,OAAO,SAAS;AAC7B,UAAM,UAAU,IAAI,mCAAmB,IAAI;AAC3C,cAAU,MAAM,QAAQ,cAAc,UAAU,iBAAiB,CAAC;AAAA,EACpE,CAAC;AACH;AAEA,eAAe,OAAO,OAA8B;AAClD,QAAM,SAAS,OAAO,SAAS;AAC7B,UAAM,SAAU,MAAM,KAAK,OAAO,uBAAS,SAAS,EAAE,MAAM,CAAC;AAI7D,cAAU,EAAE,GAAG,QAAQ,QAAQ,OAAO,OAAO,MAAM,GAAG,EAAE,CAAC;AAAA,EAC3D,CAAC;AACH;AAEA,eAAe,eACb,UACA,OACA,MACe;AACf,QAAM,QAAQ,OAAO,MAAM,QAAQ,GAC/B,MAAM,GAAG,EACV,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,OAAO;AACjB,QAAM,QAAQ,OAAO,OAAO,MAAM,SAAS,KAAK,EAAE;AAClD,QAAM,SAAS,OAAO,SAAS;AAC7B;AAAA,MACE,MAAM,KAAK,OAAO,uBAAS,gBAAgB;AAAA,QACzC;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AAAA,MAC1C,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH;AAEA,eAAe,cACb,QACA,MACe;AACf,QAAM,WAAW,KAAK,CAAC;AACvB,QAAM,QAAQ,KAAK,CAAC;AACpB,MAAI,CAAC,YAAY,CAAC,OAAO;AACvB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,SAAS,OAAO,SAAS;AAC7B,UAAM,UAAU,IAAI,mCAAmB,IAAI;AAC3C,QAAI,WAAW,UAAU;AACvB;AAAA,QACE,MAAM,QAAQ,cAAc,UAAU,iBAAiB;AAAA,UACrD,OAAO;AAAA,UACP,MAAM,OAAO,MAAM,QAAQ,KAAK;AAAA,UAChC,MAAM,OAAO,MAAM,QAAQ,KAAK;AAAA,QAClC,CAAC;AAAA,MACH;AACA;AAAA,IACF;AACA,QAAI,WAAW,aAAa;AAC1B;AAAA,QACE,MAAM,QAAQ,cAAc,UAAU,oBAAoB;AAAA,UACxD,cAAc;AAAA,QAChB,CAAC;AAAA,MACH;AACA;AAAA,IACF;AACA,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,eAAe,SAAS,UAAiC;AACvD,QAAM,SAAS,OAAO,SAAS;AAC7B;AAAA,MACE,MAAM,KAAK,OAAO,uBAAS,cAAc;AAAA,QACvC;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH;AAEA,eAAe,cAAc,MAAc,MAA+B;AACxE,QAAM,aAAS,4BAAW;AAC1B,QAAM,WAAW,OAAO,MAAM,UAAU;AACxC,QAAM,gBAAY,uCAAsB,OAAO,eAAe,MAAM,QAAQ;AAC5E,YAAU,SAAS;AACrB;AAEA,eAAe,QACb,UACA,gBACA,iBACA,MACe;AACf,MAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,iBAAiB;AACpD,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,SAAS,OAAO,SAAS;AAC7B;AAAA,MACE,MAAM,IAAI,yCAAyB,IAAI,EAAE;AAAA,QACvC;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,OAAO,QAAQ,MAAM,SAAS,EAAE;AAAA,MACpC;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,eAAe,aAAa,UAAkC;AAC5D,QAAM,SAAS,OAAO,SAAS;AAC7B;AAAA,MACE,MAAM,KAAK,OAAO,uBAAS,kBAAkB;AAAA,QAC3C,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,MACjC,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH;AAEA,eAAe,OAAsB;AACnC,QAAM,CAAC,SAAS,YAAY,GAAG,IAAI,IAAI,QAAQ,KAAK,MAAM,CAAC;AAC3D,MAAI,CAAC,WAAW,CAAC,QAAQ,MAAM,QAAQ,EAAE,SAAS,OAAO,GAAG;AAC1D,UAAM;AACN;AAAA,EACF;AACA,MAAI,YAAY,SAAS;AACvB,UAAM,YACJ,YAAY,WAAW,IAAI,KAAK,aAC5B,CAAC,YAAY,GAAG,IAAI,IACpB;AACN,WAAO,MAAM,QAAQ,WAAW,QAAQ,GAAG,SAAS;AAAA,EACtD;AACA,MAAI,YAAY,UAAU;AACxB,UAAM,aACJ,YAAY,WAAW,IAAI,KAAK,aAC5B,CAAC,YAAY,GAAG,IAAI,IACpB;AACN,WAAO,OAAO,QAAQ,YAAY,QAAQ,CAAC;AAAA,EAC7C;AACA,MAAI,YAAY,QAAQ;AACtB,QAAI,eAAe,QAAS,QAAO,UAAU;AAC7C,QAAI,eAAe,SAAU,QAAO,WAAW;AAAA,EACjD;AACA,MAAI,YAAY,WAAW;AACzB,QAAI,eAAe,OAAO;AACxB,YAAM,SAAS,WAAW,IAAI;AAC9B,UAAI,CAAC,OAAQ,OAAM,IAAI,4BAAY,mBAAmB,qDAAa;AACnE,aAAO,UAAU,MAAM;AAAA,IACzB;AACA,QAAI,eAAe,OAAQ,QAAO,YAAY;AAAA,EAChD;AACA,MAAI,YAAY,WAAW;AACzB,UAAM,cACJ,YAAY,WAAW,IAAI,KAAK,aAC5B,CAAC,YAAY,GAAG,IAAI,IACpB;AACN,UAAM,SACJ,cAAc,CAAC,WAAW,WAAW,IAAI,IACrC,aACA,WAAW,WAAW;AAC5B,WAAO,QAAQ,QAAQ,WAAW;AAAA,EACpC;AACA,MAAI,YAAY,UAAU;AACxB,QAAI,CAAC,WAAY,OAAM,IAAI,4BAAY,mBAAmB,8BAAe;AACzE,WAAO,OAAO,UAAU;AAAA,EAC1B;AACA,MAAI,YAAY,UAAU,eAAe,OAAO;AAC9C,UAAM,QAAQ,WAAW,IAAI;AAC7B,QAAI,CAAC,MAAO,OAAM,IAAI,4BAAY,gBAAgB,2BAAY;AAC9D,WAAO,OAAO,KAAK;AAAA,EACrB;AACA,MAAI,YAAY,UAAU;AACxB,QAAI,CAAC,WAAY,OAAM,IAAI,4BAAY,mBAAmB,8BAAe;AACzE,WAAO,eAAe,YAAY,KAAK,CAAC,GAAG,IAAI;AAAA,EACjD;AACA,MAAI,YAAY,SAAU,QAAO,cAAc,YAAY,IAAI;AAC/D,MAAI,YAAY,YAAY;AAC1B,QAAI,CAAC,WAAY,OAAM,IAAI,4BAAY,mBAAmB,8BAAe;AACzE,WAAO,SAAS,UAAU;AAAA,EAC5B;AACA,MAAI,YAAY,YAAY,eAAe,WAAW;AACpD,UAAM,OAAO,KAAK,CAAC;AACnB,QAAI,CAAC,KAAM,OAAM,IAAI,4BAAY,mBAAmB,oDAAiB;AACrE,WAAO,cAAc,MAAM,IAAI;AAAA,EACjC;AACA,MAAI,YAAY,WAAW;AACzB,QAAI,CAAC,WAAY,OAAM,IAAI,4BAAY,mBAAmB,8BAAe;AACzE,WAAO,QAAQ,YAAY,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI;AAAA,EACnD;AACA,MAAI,YAAY,eAAgB,QAAO,aAAa,UAAU;AAC9D,MAAI,YAAY,OAAO;AACrB,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,cAAc;AACtD,UAAM,mBAAe,4BAAW,CAAC;AACjC;AAAA,EACF;AACA,QAAM;AACN,QAAM,IAAI,4BAAY,mBAAmB,iCAAQ,OAAO,EAAE;AAC5D;AAEA,KAAK,KAAK,EAAE,MAAM,CAAC,UAAU;AAC3B,aAAW,KAAK;AAChB,UAAQ,WAAW;AACrB,CAAC;","names":["path","capabilities","fs","script","code","launcher"]}

package/package.json

@@ -1,6 +1,49 @@
 {
   "name": "@zhuixin/cli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "license": "Apache-2.0",
+  "description": "AppTrace CLI for evidence-backed application analysis",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/zhuixin-labs/app-evidence.git",
+    "directory": "packages/cli"
+  },
+  "homepage": "https://github.com/zhuixin-labs/app-evidence",
+  "bugs": {
+    "url": "https://github.com/zhuixin-labs/app-evidence/issues"
+  },
+  "keywords": [
+    "mcp",
+    "ai-agents",
+    "app-analysis",
+    "static-analysis",
+    "ios",
+    "ipa"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=22.19"
+  },
+  "main": "dist/index.js",
+  "bin": {
+    "apptrace": "dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "rea-agents": "6.4.0",
+    "@zhuixin/metadata": "0.1.0",
+    "@zhuixin/shared": "0.1.0",
+    "@zhuixin/mcp": "0.1.0"
+  },
+  "devDependencies": {
+    "tsup": "^8.5.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit -p tsconfig.json"
+  }
 }

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.